Virtual Private Cloud (VPC)

A Virtual Private Cloud (VPC) is a private, isolated network you control within a public cloud provider such as AWS, Azure, or GCP. You define its subnets, routing, and firewall rules, so workloads inside it are separated from other tenants and reachable only through the paths you allow - your own network segment on shared infrastructure.

The VPC is what makes bring-your-own-cloud deployment a real trust boundary: software running inside your VPC sits behind your routing and egress rules, under your identity controls, with no path out that you did not open. Deploying a governance layer there - single-tenant, egress-denied by default - keeps the most sensitive traffic inside a perimeter you own even while using cloud elasticity.